Skip to content

Seal vulnerable packages#1

Merged
JenAks merged 3 commits into
mainfrom
seal-fixes/fix-scan
Jun 9, 2026
Merged

Seal vulnerable packages#1
JenAks merged 3 commits into
mainfrom
seal-fixes/fix-scan

Conversation

@seal-security-bot

@seal-security-bot seal-security-bot Bot commented Dec 25, 2025

Copy link
Copy Markdown
Contributor

Seals the following packages to remediate their vulnerabilities:

Package Version Vulnerabilities fixed Sealed version
com.fasterxml.jackson.core:jackson-core 2.19.2 GHSA-72hv-8253-57qq 2.19.2+sp1
commons-lang:commons-lang 2.6 CVE-2025-48924 2.6+sp1
org.apache.commons:commons-lang3 3.12.0 CVE-2025-48924 3.12.0+sp1
org.apache.commons:commons-text 1.9 CVE-2022-42889 1.9+sp1
org.apache.hadoop:hadoop-client-runtime 3.4.1 CVE-2023-39410
CVE-2024-47561
CVE-2025-52999
SNYK-JAVA-COMFASTERXMLJACKSONCORE-7569538
CVE-2024-6763
CVE-2025-48924
CVE-2025-49128
CVE-2025-53864
CVE-2025-48734
3.4.1+sp6
org.apache.spark:spark-core_2.11 2.3.2 CVE-2018-17190
CVE-2021-28165
CVE-2024-8184
2.3.2+sp1
org.apache.tomcat.embed:tomcat-embed-core 10.1.40 CVE-2025-49124
CVE-2025-49125
CVE-2025-55752
CVE-2025-46701
CVE-2025-55754
CVE-2025-61795
CVE-2025-48989
10.1.40+sp3

@JenAks JenAks merged commit 862b4a1 into main Jun 9, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant